Staff DevSecOps Engineer

Join our team as a Staff DevSecOps Engineer, where you will own the engineering side of our compliance program, operate our compliance automation platform, and productize compliance. You will also manage cloud security posture and runtime security tooling, triage and remediate findings, build auto-remediation workflows, and maintain CI/CD security gates. Additionally, you will help close the prototype-to-production gap, make secure-by-default the norm, and build the automation the team runs on. You will partner with corporate security and GRC functions while building and maturing our in-house security capability.

• Own the engineering side of the compliance program, implementing controls, collecting evidence, and ensuring audit readiness.
• Operate the compliance automation platform, integrating evidence pipelines and mapping controls to real implementation.
• Build and maintain CI/CD security gates, implementing security controls as reusable pipeline components and enforcing automated policy.

• Security monitoring and detection/alerting design
• Fluency with the categories of modern cloud security tooling — CSPM, ASPM/SAST and secret scanning, compliance automation, and SIEM (e.g., tools such as Wiz, Prisma Cloud, Snyk, Drata, Vanta, or equivalents)
• Experience standing up or maturing an in-house security function
• Strong coding/scripting ability to build automation, not just configure tools — you write the pipelines, modules, and tooling that scale security across many services
• Multi-cloud exposure and experience securing an internal developer platform
• Strong infrastructure-as-code skills, especially Terraform, including policy-as-code
• Experience applying AI/LLM tooling to security operations — auto-remediation, evidence generation, agentic workflows
• Hands-on vulnerability management at scale: triage, prioritization, SLA-driven remediation, and the automation to make it sustainable
• Proven CI/CD security experience: building pipeline security controls (SAST/SCA, secret scanning, dependency and container scanning) into developer workflows
• Working knowledge of SOC 2 (or comparable frameworks) and what it takes to implement and evidence controls in a real engineering environment
• 5+ years in security engineering, DevSecOps, or platform/infrastructure engineering with a strong security focus (Staff level: 8+ years and a track record of building security functions or programs)
• Deep hands-on cloud security experience (compute, networking, IAM, key management, logging) on a major cloud provider